If we're setting a frame's content settings based on its opener,...

chrome/renderer/render_view.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/renderer/render_view.h"
 
 #include <algorithm>
 #include <string>
 #include <vector>
 
@@ skipping 1276 matching lines @@
     HostContentSettings::iterator host_content_settings =
         host_content_settings_.find(GURL(request.url()));
     if (host_content_settings != host_content_settings_.end()) {
       SetContentSettings(host_content_settings->second);
 
       // These content settings were merely recorded transiently for this load.
       // We can erase them now.  If at some point we reload this page, the
       // browser will send us new, up-to-date content settings.
       host_content_settings_.erase(host_content_settings);
     } else if (frame->opener()) {
-      WebView* opener_view = frame->opener()->view();
-      RenderView* opener = FromWebView(opener_view);
-      SetContentSettings(opener->current_content_settings_);
+      // The opener's view is not guaranteed to be non-null (it could be
+      // detached from its page but not yet destructed).
+      if (WebView* opener_view = frame->opener()->view()) {
+        RenderView* opener = FromWebView(opener_view);
+        SetContentSettings(opener->current_content_settings_);
+      }
     }
 
     // Set zoom level.
     HostZoomLevels::iterator host_zoom =
         host_zoom_levels_.find(GURL(request.url()));
     if (host_zoom != host_zoom_levels_.end()) {
       webview()->setZoomLevel(false, host_zoom->second);
       // This zoom level was merely recorded transiently for this load.  We can
       // erase it now.  If at some point we reload this page, the browser will
       // send us a new, up-to-date zoom level.
@@ skipping 3946 matching lines @@
   webkit_glue::FormData form;
   const WebInputElement element = node.toConst<WebInputElement>();
   if (!form_manager_.FindFormWithFormControlElement(
           element, FormManager::REQUIRE_NONE, &form))
     return;
 
   autofill_action_ = action;
   Send(new ViewHostMsg_FillAutoFillFormData(
       routing_id_, autofill_query_id_, form, value, label));
 }